CyberArk's On The Front Lines webinar series covers a variety of hot topics related to security exploits involving privileged accounts. Our security experts will review a potential threat and demonstrate CyberArk technology and best practices for mitigating risks.

Webinars will be offered the first Tuesday of each month at both 9:00 am EST and 2:00 pm EST.

We are currently scheduling sessions for Q1. Check back shortly for details.

Privileged Account Security Best Practices for Robotic Process Automation: CyberArk Integration with UiPath

Tuesday, August 7th / 9 a.m. ET and 2:00 p.m. ET

Examining security risks related to privileged credentials: Learn how to proactively secure, protect and monitor privileged credentials in RPA

:

Learn More

RPA software interacts directly with business applications using credentials and entitlements, so this can introduce risks when the robots automate and perform routine business processes across multiple systems.

Learn about the vulnerabilities attackers seek out in RPA, and the methods you can employ to proactively secure, protect and monitor privileged credentials in RPA non-human user entities that mirror human entitlements. We’ll provide an overview and demo of the UiPath platform, show how the integration with CyberArk works and talk about how companies are using it.

During this session, you’ll learn:
  • How to secure RPA credentials using CyberArk and how to integrate with existing procedures and management policies
  • How to implement a seamless, out of box integration with UiPath (Demo)

OTFL Machine Learning Prevents Privilege Attacks at the Endpoint

February 6 / 9 a.m. ET and 2:00 p.m. ET

Endpoint Application Risk Analysis Service: Stephen Lowing and Chuck McAllister

:

Learn More

-

To address ongoing privilege account risk posed by evolving threat tactics, attend this session to learn how, through machine learning and cloud-based analytics, to stop attackers from gaining a foothold on endpoints. By detecting potentially malicious applications, timely, well-informed privilege and application control policy decisions can be made.

During this session we’ll demonstrate:

  • New threat detection capabilities that provide a risk framelet via a dashboard to indicate the
  • amount of accounts that are potentially exposed to credential theft. The ability to detect and control unknown applications from installing and running using file-based machine learning algorithms.

Detecting the Risk Obscured in Hidden Parts of Kerberos

March 6 / 9am EST or 2pm EST

A CyberArk Labs team presentation: Ido Hoorvitch & Lavi Lazarovitz

:

Learn More

-

As long as Kerberos communication is not being decrypted, attackers get an opportunity to act freely using Kerberos without being detected because the encryption is being handed to them on a silver platter. Because Microsoft’s native software uses Kerberos, once control over a computer in a network is obtained, attackers can hide their activities and easily blend into a detection-less highway.

Attend this webinar presented by the CyberArk Labs team to learn how decrypting the Kerberos protocol can bridge the gap between attackers and the defensive side by providing the defenders a real view over the network.

CyberArk & SAP Certified Integration: Secure Critical Business Systems throughout the Enterprise

October 2 / 9am EST or 2pm EST

Presenter: Christian Goetz, CyberArk’s Director of Presales, DACH

:

Learn More

Earlier this year, US-CERT and others warned organizations worldwide about ongoing and eminent cyber attacks targeting ERP applications. A critical part of running a business effectively, securing these high value applications and the related sensitive data they house is a major initiative for virtually every organization.

In this webinar, we’ll explain how organizations can effectively manage, secure and control the use of privileged accounts used by SAP applications and admin. CyberArk augments native SAP security features and best practices, enabling a holistic approach to enterprise security while addressing the elevated risks in an SAP environment.

We’ll discuss and demonstrate how to:

  • Integrate CyberArk & SAP
  • Discover and onboard SAP privileged accounts via native CyberArk REST API 
  • Secure HANA and other SAP systems on the cloud
  • Control SAP applications’ and systems’ access throughout the infrastructure, operating system, and data center

Start-to-Finish Demo: Building Scripts with REST API – Session 2

November 6 / 9am EST or 2pm EST

Presenter: Joe Garcia, Strategic Accounts Solutions Engineer, DevOps Security, CyberArk

:

Learn More


Would you like to learn how to build scripts that use the Enterprise Password Vault (EPV) REST API for automating account creation, user management and more?  Back by popular demand, CyberArk’s Joe Garcia will lead an interactive session and demonstrate how to build an example project. In this session, Joe will demonstrate how to provision a local user on target machine and onboard that target user to the vault. He’ll explain how to identify repeatable tasks that are ripe for automation and then review the decomposition tasks/sub tasks.

Securing Containers: Understanding and Eliminating Vulnerabilities

December 4th / 9am ET or 2pm ET

Presenter: Darren Khan, Senior Solution Engineer, CyberArk

:

Learn More

-

The adoption of containers as a means to package and run applications is rapidly growing. There are many benefits driving this trend, first and foremost for developers, but also extending across the entire application lifecycle. Great progress, but are you aware of the security implications of adopting containers?

This session takes a holistic view of the potential security vulnerabilities associated with containers and the techniques for addressing each vulnerability. The session includes brief demos of typical problem/solution scenarios which are applicable to Docker, Kubernetes and platforms such as Open Shift and Cloud Foundry.

Attend to learn:

  1. Why DevOps and application development teams love containers and container orchestration tools 
  2. How containers are typically hacked
  3. Practical techniques and next steps that can help you to quickly improve the security of your containerized applications

Rethink the Threat: A Single View into Privileged Account Risks

Tuesday, August 7th / 9am EST or 2pm EST

A purpose-built solution that provides complete proactive controls on privileged account usage: Bogdan Nedelcov, Head of Product Alliances & Andy Givens, Regional SE Director

:

Learn More

Chris Anderson.jpg

RPA software interacts directly with business applications using credentials and entitlements, so this can introduce risks when the robots automate and perform routine business processes across multiple systems.
Learn about the vulnerabilities attackers seek out in RPA, and the methods you can employ to proactively secure, protect and monitor privileged credentials in RPA non-human user entities that mirror human entitlements. We’ll provide an overview and demo of the UiPath platform, show how the integration with CyberArk works and talk about how companies are using it.
During this session, you’ll learn:

  • How to secure RPA credentials using CyberArk and how to integrate with existing procedures and management policies
  • How to implement a seamless, out of box integration with UiPath (Demo)

Golden SAML are the new Golden Tickets

December 12 / 9 a.m. ET and 2:00 p.m. ET

Explore a new attack vector that CyberArk Labs has discovered and dubbed “golden SAML” : Vishal Patel

:

Learn More

-

In this webinar, we will explore a new attack vector that CyberArk Labs has discovered and dubbed “golden SAML.” The vector enables an attacker to create a golden SAML, which is basically a forged SAML “authentication object,” and authenticate across every service that uses SAML 2.0 protocol as an SSO mechanism.

Our team from CyberArk Labs will discuss how in a golden SAML attack, attackers can gain access to any application that supports SAML authentication (e.g. Azure, AWS, vSphere, etc.) with any privileges they desire and be any user on the targeted application (even one that is non-existent in the application in some cases).

We’ll then demonstrate our new tool, shimit, that implements a golden SAML in order to compromise an AWS account from within a Microsoft domain.

Strengthening Machine Identity Protection – A Combined Venafi and CyberArk Application Identity Manager Solution

September 12 / 2PM EST

Perform sensitive renewal, replacement and rekey operations without administrator involvement: Brian Durkin (Venafi) Joe Garcia and Kevin Ross (CyberArk)

:

Learn More

Kevin Ross.jpg

As part of your SSL/TLS certificate lifecycle management process, Venafi uses privileged credentials stored in the Venafi solution. Based on security and operational needs, CyberArk and Venafi developed a joint integration to automatically protect and manage these credentials in CyberArk, making them available to Venafi, as needed, based on organizations’ security policy. Join us and learn how to:

  • Securely store privileged credentials used by Venafi in the CyberArk solution
  • Automatically rotate credentials used by the Venafi solution
  • Automatically perform credential- protected certificate renewal and replacement operations

Curse of the typo! Automate repeated tasks to improve efficiency and reduce risk around user mistakes

September 19 / 2PM EST

Automate privilege tasks to avoid user error and costly outages: David Higgins

:

Learn More

David Higgins.jpg

Daily repetitive tasks can be inadvertently damaging to a business caused by things human error (typos!) and abuse of privileged access (insider threats!). Automated task management, both in the cloud and on-premises, safeguards your remote vendors and internal users alike by automating manual sometimes critically sensitive privileged tasks while simultaneously improving workflow productivity.

Join this session to see how CyberArk can automate an array of regular tasks with a single click to establish user accountability and better protect your environment.

How Attackers are Using Domain Fronting to Abuse Content Delivery Networks (CDNs)

September 28 / 2PM EST

A Special Red Team OTFL Webinar: Shay Nahari

:

Learn More

In this OTFL session, Shay Nahari, CyberArk’s Red Team lead, will present a new technique for domain fronting, which enables attackers to abuse Content Delivery Networks (CDNs) to mask malware command and control (C2) traffic. While many CDNs are potentially impacted, Akamai is one of the largest. During our research we identified tens of thousands of high reputation domains served by Akamai’s CDN that can be used for domain fronting.

This research demonstrates a new technique for hiding a C2 channel completely within a CDN. We will show POC tools that utilize this technique.

Security that Moves At DevOps Velocity

October 3 / 2PM EST

Join us for Part 1 of our OTFL DevOps Series: Jody Hunt and Evan Litwak

:

Learn More

With the velocity of DevOps, in many cases companies are rolling out applications that fall outside of their normal stringent security policies. Business units are accepting that risk, because in companies where security stop applications rolling out, they lose competitive advantage, despite staying relatively risk free. What is needed is 1) for security, a tool set that allows them to extend our trust networks into a next gen I.T environment without inhibiting the speed/velocity of the cloud and DevOps teams; and 2) for DevOps/cloud teams, you want to be able to move at speed, without being concerned with manual security processes at every turn.

Attend Part 1 of our OTFL DevOps series to learn how CyberArk Conjur helps DevOps teams to secure their secrets, machine identities, and users in highly dynamic DevOps environments at scale

CyberArk Conjur - A library of validated integrations with CI/CD tools

October 17 / 2PM EST

Join us for Part 2 of our OTFL DevOps Series: Jody Hunt and Evan Litwak

:

Learn More

In Part 2 of our DevOps series, we’ll demonstrate how developers can integrate Conjur into their projects with minimal effort.  In order to maintain the software delivery pipeline integrity and to help reduce security risks associated with unprotected privileged credentials embedded into applications, CyberArk Conjur immediately incorporates and mirrors privileged account security policies consistently across the DevOps ecosystem. Attend this session to learn how the CyberArk Conjur Solution:

  • Secures Build Products & CI/CD Tools
  • Provides RESTful API support for automated account provisioning of build products with orchestration tools
  • Removes credentials from code/configuration files
  • Reverts credentials back in case of disruption
  • Authenticates CI/CD tools, images and build product to maintain pipeline integrity
  • Enables credential-protected configuration and orchestration process

Building and Securing Cloud Workloads with AWS and CyberArk

October 24 / 2PM EST

Automating in AWS… with AWS: Andy Givens, CyberArk and Scot Ward, Amazon Web Services

:

Learn More

Andy Givens.jpg

Amazon has set the stage for an evolution in cloud computing. Not only providing a low cost environment to run infrastructure, but by delivering services consumable directly by your application builders. But security of the cloud is a shared responsibility, and in a developer-centric world, organizations must provide security tools that entice developers to build securely, and make it easy to do so. Join speakers from CyberArk and AWS to learn how we work together to help organizations secure their application delivery and management.

The Personal Privileged Users: How to Manage Named Administrators

November 7 / 2PM EST

Mitigate the high risk that expose these users: David Higgins and Lars Melandar

:

Learn More

David Higgins.jpg Lars jpg.jpg


Personal Privileged Users are Strong Named accounts that are owned by individuals in the organization. They could be Domain users that are member of the strongest groups in the ActiveDirectory, such as “Domain Admins”, but they could also be local users with highest permissions on Operating Systems including Unix/Linux and also on Corporate Business Applications.

This session will explore why the Personal Privileged Users are under the highest risk in your organization and how to mitigate those risks.


REGISTER NOW